Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:47565
HistoryJun 17, 2024 - 6:46 a.m.

Cross-site Scripting (XSS)

2024-06-1706:46:59
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
1
typo3
xss
vulnerability
t3:// urls
typolink functionality
backend forms
frontend extensions

6.4 Medium

AI Score

Confidence

High

TYPO3 is vulnerable to cross-site scripting (XSS). The vulnerability is due to improper handling of t3:// URLs and typolink functionality, affecting both backend forms and frontend extensions that use typolink rendering

6.4 Medium

AI Score

Confidence

High